3691 matches found
ROOT-APP-MAVEN-CVE-2026-91776 CVE-2026-91776 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-91776 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-77310 CVE-2026-77310 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-77310 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-91777 CVE-2026-91777 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-91777 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-68497 CVE-2026-68497 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-68497 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
CVE-2020-8840
CVE-2020-8840: Vulnerabilidad de ejecución remota de código en FasterXML/jackson-databind 0x00 Introducción jackson-databind es una biblioteca de procesamiento JSON perteneciente al grupo de proyectos FasterXML. 0x01 Resumen de la vulnerabilidad El 19 de febrero, NVD publicó un aviso de seguridad...
CVE-2020-9547
CVE-2020-9547:FasterXML/jackson-databind Remote Code Execution Vulnerability...
CVE-2019-12384
CVE-2019-12384 Jackson RCE And SSRF 0x01 python -m SimpleHTTPServer python -m SimpleHTTPServer Serving HTTP on 0.0.0.0 port 8000 ... 127.0.0.1 - - 24/Jul/2019 03:06:32 "GET /inject.sql HTTP/1.1" 200 - inject.sql CREATE ALIAS SHELLEXEC AS $$ String shellexecString cmd throws java.io.IOException...
FasterXML jackson-databind - Deserialization Remote Code Execution
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap. This vulnerability allows attackers to execute arbitrary code through deserialization of...
study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095
Informe de investigación sobre las vulnerabilidades S2-054, S2-055 de Struts2 y las vulnerabilidades CVE-2017-7525, CVE-2017-15095 de Jackson Publicamos un artículo resumido que resume los puntos clave y lo hace fácil de leer. Recomendado para quienes deseen conocer primero el panorama general o ...
CVE-2020-9548
CVE-2020-9548: Vulnerabilidad de ejecución remota de código en FasterXML/jackson-databind...
jackson-CVE-2020-8840
CVE-2020-8840 Vulnerabilidad de ejecución remota de código en FasterXML/jackson-databind...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-59888 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and...
CVE-2019-14439
CVE-2019-14439 Jackson-databind Ejecución Remota de Código...
Important: Red Hat Security Advisory: dogtag-pki security update
An update for dogtag-pki is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing
A flaw was found in jackson-databind. An unauthenticated attacker can trigger a denial of service DoS by exploiting an unbounded numeric parse vulnerability. This occurs during the deserialization of javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar fields from JSON strings,...
Demo-Exploit-Jackson-RCE
Demo-Exploit-Jackson-RCE Basado en el proyecto jackson-rce-via-spel, este proyecto sirve como una aplicación web de ejemplo para probar múltiples vectores de ataque carga de archivos, formularios contra la vulnerabilidad de Jackson-databind. Introducción Basado en un frontend Angular7 y un backen...
CVE-2020-8840
CVE-2020-8840 Código del entorno de reproducción y análisis de la vulnerabilidad de ejecución remota de código en Jackson-databind CVE-2020-8840. El proyecto incluye: jackson-databind, Fastjson payloads Clase maliciosa WebServer marshalsec-0.0.3-SNAPSHOT-all.jar compilado Resumen de la...
ROOT-APP-MAVEN-CVE-2026-54517 CVE-2026-54517 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-54517 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-54518 CVE-2026-54518 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-54518 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...